Debian: Security Advisory (DLA-2097-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ALPINE-CVE-2020-8597

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eaprequest and eapresponse functions...

CVE-2020-8597

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eaprequest and eapresponse functions...

CVE-2020-8516

The daemon in Tor through 0.4.1.8 and 0.4.2.x through 0.4.2.6 does not verify that a rendezvous node is known before attempting to connect to it, which might make it easier for remote attackers to discover circuit information. NOTE: The network team of Tor claims this is an intended behavior and...

CVE-2020-8516

The daemon in Tor through 0.4.1.8 and 0.4.2.x through 0.4.2.6 does not verify that a rendezvous node is known before attempting to connect to it, which might make it easier for remote attackers to discover circuit information. NOTE: The network team of Tor claims this is an intended behavior and...

Design/Logic Flaw

The daemon in Tor through 0.4.1.8 and 0.4.2.x through 0.4.2.6 does not verify that a rendezvous node is known before attempting to connect to it, which might make it easier for remote attackers to discover circuit information. NOTE: The network team of Tor claims this is an intended behavior and...

CVE-2020-8516

The daemon in Tor through 0.4.1.8 and 0.4.2.x through 0.4.2.6 does not verify that a rendezvous node is known before attempting to connect to it, which might make it easier for remote attackers to discover circuit information. NOTE: The network team of Tor claims this is an intended behavior and...

CVE-2020-8516

The daemon in Tor through 0.4.1.8 and 0.4.2.x through 0.4.2.6 does not verify that a rendezvous node is known before attempting to connect to it, which might make it easier for remote attackers to discover circuit information. NOTE: The network team of Tor claims this is an intended behavior and...

CVE-2020-8516

Affected software / component: Tor daemon up to 0.4.1.8 and 0.4.2.x through 0.4.2.6. Root cause: The daemon does not verify that a rendezvous node is known before attempting to connect to it. Impact (as stated): may allow remote attackers to discover circuit information. Contested note: Tor netwo...

CVE-2020-8516

The daemon in Tor through 0.4.1.8 and 0.4.2.x through 0.4.2.6 does not verify that a rendezvous node is known before attempting to connect to it, which might make it easier for remote attackers to discover circuit information. NOTE: The network team of Tor claims this is an intended behavior and...

PT-2020-20191 · Tor +2 · Tor +2

Name of the Vulnerable Software and Affected Versions: Tor versions 0.4.1.8 and 0.4.2.x through 0.4.2.6 Description: The daemon in Tor does not verify that a rendezvous node is known before attempting to connect to it, which might make it easier for remote attackers to discover circuit informatio...

CVE-2019-12999

Lightning Network Daemon lnd before 0.7 allows attackers to trigger loss of funds because of Incorrect Access Control...

CVE-2019-12999

Lightning Network Daemon lnd before 0.7 allows attackers to trigger loss of funds because of Incorrect Access Control...

CVE-2019-12999

The CVE-2019-12999 issue affects the Lightning Network Daemon (lnd) up to version 0.7 (pre-0.7). The root cause is Incorrect/ Improper Access Control, enabling attackers to trigger loss of funds. Public document sets (GHSA-78HJ-86CR-6J2V and OSV entries) corroborate an access-control weakness in ...

CVE-2019-12999

Lightning Network Daemon lnd before 0.7 allows attackers to trigger loss of funds because of Incorrect Access Control...

PT-2020-9354 · Unknown · Lightning Network Daemon

Name of the Vulnerable Software and Affected Versions: Lightning Network Daemon lnd versions prior to 0.7 Description: The issue is related to Incorrect Access Control, allowing attackers to trigger loss of funds. This is due to Improper Access Control in the Lightning Network Daemon...

CVE-2020-8444

In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis ossec-analysisd is vulnerable to a use-after-free during processing of ossec-alert formatted msgs received from authenticated remote agents and delivered to the analysisd processing queue by ossec-remoted...

CVE-2020-8446

In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis ossec-analysisd is vulnerable to path traversal with write access via crafted syscheck messages written directly to the analysisd UNIX domain socket by a local user...

CVE-2020-8448

In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis ossec-analysisd is vulnerable to a denial of service NULL pointer dereference via crafted messages written directly to the analysisd UNIX domain socket by a local user...

CVE-2015-8011

Buffer overflow in the lldpdecode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries...